76 to 100 of 218 Permanent Azure Sentinel Jobs

capacity. Broad technical knowledge across cloud, infrastructure, Microsoft 365, identity, digital workplace, cyber security, resilience and managed services. Strong working knowledge of Microsoft Azure, Microsoft 365 and Microsoft Entra ID/Active Directory. Strong understanding of security and compliance principles, technologies and frameworks, including Zero Trust, Microsoft Defender …/Sentinel, NCSC, NIST and ISO 27001. Experience engaging with senior customer stakeholders and acting as a trusted technical advisor. Strong understanding of ITIL‐aligned service management and managed service environments. Excellent leadership, stakeholder management and communication skills, with the ability to communicate effectively at both technical ...

based insurer, hybrid working, up to £90k base + bonus & benefits package What you'll be doing: Designing, deploying and maintaining secure, scalable Azure infrastructure, using Infrastructure as Code (Terraform, Bicep or ARM) Enabling CI/CD and release automation through Azure DevOps, supporting Development teams … with cloud-native hosting, APIs and containerised workloads Partnering with Data teams on cloud ingestion, storage, analytics and BI infrastructure, including Azure Fabric and/or Databricks Building automation with PowerShell/Python to cut manual operational overhead Implementing monitoring, logging, backup, DR and resilience practices Embedding security ...

scalability, and performance to meet the growth needs of ME+EM. Investigate and diagnose advanced software, hardware, and network problems, utilising expert knowledge of Azure, Google Cloud and Hyper‐V infrastructure to troubleshoot and identify root causes and implement effective solutions. Collaborate with second‐line engineers, vendors, and other … evaluating their potential impact and recommending innovative solutions to address business needs. Skills IT-related degree or equivalent professional experience CCNA or Microsoft Azure Administrator (AZ-104) certified — essential Experience in a third‐line, cloud, or network infrastructure role Proven experience designing and implementing backup & disaster recovery strategies ...

about you. About the teamSecurity Engineering is a team of five covering cloud security, detection, and security operations. They work directly in the Azure estate and are close to the infrastructure, not abstracted behind a policy layer. The team runs Microsoft Sentinel, Defender XDR, and Defender … cloud security, detection tooling, and incident response, without being narrowly specialised. You own meaningful parts of the security stack, contribute hands‐on to Azure cloud hardening, and show up reliably when incidents need investigating or pen test cycles need coordinating. You're energised by visible impact, your work ...

structure detections, gaps analysis, and defensive improvements. Experience with security operations in cloud platforms and common tools (e.g., Microsoft Defender, Sentinel, Splunk, CrowdStrike, Palo Alto, AWS/Azure security services) and integrating telemetry across environments. Calm under pressure, able to lead effectively during incidents and make ...

structure detections, gaps analysis, and defensive improvements. Experience with security operations in cloud platforms and common tools (e.g., Microsoft Defender, Sentinel, Splunk, CrowdStrike, Palo Alto, AWS/Azure security services) and integrating telemetry across environments. Calm under pressure , able to lead effectively during incidents and make ...

cases and monitoring Automate manual detection and remediation processes Develop threat intelligence and threat-hunting capabilities Improve security monitoring across AWS, GCP and Azure Work closely with engineering teams to turn security findings into scalable technical improvements Review existing tooling and influence future technology decisions Provide technical leadership … across the security function What we’re looking for: Experience building detections rather than purely responding to SOC alerts Strong SIEM experience – Microsoft Sentinel, Splunk or similar Cloud security experience across AWS, GCP and/or Azure KQL, SPL or similar querying experience Python scripting/ ...

CK. Experience designing remote and local access models including PAM and ZTNA with identity integration. Familiarity with Microsoft cloud security stack including Microsoft Sentinel, Microsoft Entra ID, Microsoft Defender for Cloud and secure connectivity on Azure Advanced certifications such as CISSP, TOGAF or SABSA, Cloud Security ...

into the Global Security Operations Centre. Review and validate detection logic, thresholds, alert conditions and expected behaviours across SIEM platforms such as Microsoft Sentinel, Splunk, QRadar, ArcSight, Exabeam, and LogRhythm . Ensure accurate mapping of detection content to recognised threat frameworks, including MITRE ATT&CK . Identify detection … teams. Create investigation workflows, triage processes and escalation procedures for security incidents across Microsoft Defender, CrowdStrike, Cortex XDR, SentinelOne, Carbon Black, Azure, AWS, and GCP environments . Define required enrichment data, threat intelligence inputs and decision‐making criteria. Ensure procedures are practical, repeatable and aligned with global security ...

outputsCreate novel analytic techniques for incident detectionCollaborate with an MSP SOC to maintain and tune the detection catalogueBuild automated reporting dashboards using Microsoft Sentinel workbooksSupport security initiatives including ISO 27001 activities and KQL-based tasksEnsure monitoring coverage across cloud platforms, SaaS apps, and internal systemsContribute to documentation … similar role.Strong proficiency in KQL and hands-on experience with Microsoft SentinelFamiliarity with Microsoft Defender tools (Endpoint & O365)Exposure to Azure cloud logging and Kubernetes environmentsKnowledge of attacker TTPs and MITRE ATT&CK frameworksProactive, collaborative, and innovative mindsetDesirable/Nice-to-Have:Experience with Python, Terraform ...

information security, cyber security, security operations or related disciplines. Experience investigating security incidents and managing security alerts. Good understanding of Microsoft 365, Azure/Entra ID and cloud security principles. Experience working with vulnerability management programmes. Knowledge of security frameworks and standards including: ISO/IEC 27001 Cyber … financial services firm or other highly regulated environment. Experience responding to client security questionnaires and audits. Knowledge of Microsoft Security technologies including Defender, Sentinel, Purview and Entra ID. What's In It For You We provide comprehensive support for our colleagues' health and wellbeing, including private medical cover ...

ability to participate in ad hoc out‐of‐hours support where required. Desirable experience and qualifications Experience administering security capabilities within Microsoft Azure, Microsoft 365, Microsoft Entra ID, Microsoft Defender and/or Microsoft Sentinel. Experience of SIEM, endpoint detection and response, secure web gateway, email security, network … security and privileged access technologies. Relevant current certifications such as Microsoft Security, Compliance and Identity, Azure, CompTIA Security+, CISSP, SSCP, CCNA Security or Palo Alto Networks certifications. ITIL Foundation certification or practical experience working within an IT service management framework. Experience in a regulated, safety‐critical, transport, logistics ...

Cyber Security Analyst - Microsoft Security/IAM 3-Month Contract | Inside IR35 Bristol/Hybrid - Ideally 1-2 days per week onsite Microsoft Sentinel | Entra ID | IAM | Conditional Access | MFA | RBAC We're looking for an experienced Cyber Security Analyst to join a highly innovative organisation in Bristol … Identity & Access Management within the Microsoft ecosystem , so we're looking for somebody with strong hands-on knowledge of Entra ID/Azure AD, Conditional Access, MFA and RBAC , alongside experience working with Microsoft Sentinel . What you'll be doing Supporting and improving Identity & Access ...

Cyber Security Analyst – Microsoft Security/IAM 3-Month Contract | Inside IR35 Bristol/Hybrid – Ideally 1-2 days per week onsite Microsoft Sentinel | Entra ID | IAM | Conditional Access | MFA | RBAC We’re looking for an experienced Cyber Security Analyst to join a highly innovative organisation in Bristol … Identity andamp; Access Management within the Microsoft ecosystem , so we’re looking for somebody with strong hands‐on knowledge of Entra ID/Azure AD, Conditional Access, MFA and RBAC , alongside experience working with Microsoft Sentinel . What you’ll be doing Supporting and improving Identity ...

client stakeholders (engineering, security, operations) to validate requirements, manage technical risks, and coordinate delivery plans and change windows. QualificationsRequiredStrong track record delivering production Azure environments, including hands-on experience ofnetworking, IAM, governance, and security controls, ideally through working with external clients Significant hands-on experience implementing and operating … restore, performance, and HA/DR. Strong experience with Infrastructure as Code (Terraform and/or Bicep/ARM) and CI/CD (Azure DevOps, GitHub Actions, GitLab CI or similar). Solid cloud security engineering knowledge: RBAC/IAM, private networking, key/secrets management, encryption, secure ...

modernisation, and AI adoption programmes. Support pre-sales activities, workshops, proof of concepts, and executive presentations. Technology & Innovation Drive capability development across: Microsoft Azure Microsoft 365 Security Microsoft Defender Suite Microsoft Sentinel Microsoft Entra Microsoft Copilot for Security Microsoft Purview AWS Security Google Cloud Security … Access) Microsoft 365 Defender (Defender for Endpoint, Defender for Office 365, Defender for Identity, Defender for Cloud Apps) Microsoft Defender for Cloud Microsoft Sentinel Microsoft Copilot for Security Microsoft Intune AWS Security Services Google Cloud Platform Security Zero Trust Architectures DevSecOps CNAP platforms (like Wiz and Palo Alto ...

against Windows, macOS, and Linux platforms. Awareness of anti-virus, anti-malware, and endpoint protection concepts. Familiarity with SIEM concepts (Cortex XSIAM, Microsoft Sentinel, or equivalent). Familiarity with cloud services (Microsoft Azure, Microsoft 365, AWS). Awareness of incident management processes. Understanding of adversary motivations ...

Cyber Security Specialist/Cyber Security Engineer - CISSP, CEH, CCNA Security, Incident Response, Threat Monitoring, Vulnerability Management, Security Architecture, Azure, Windows Server Infrastructure. Permanent. London Hybrid. c.£90k - £100k + Bons +Benefits Global Law Firm seeks an experienced IT Cyber Security Specialist to join its Infrastructure Engineering team … cybersecurity posture from an infrastructure perspective and external security rating. Identify, assess and remediate vulnerabilities across hardware, software and infrastructure (Windows Server and Azure Cloud). Monitor emerging threats and lead or support Incident Response investigations and mitigation. Evaluate, test and recommend security enhancements, controls and threat prevention ...

provide recommendations to strengthen detection outcomes Job Requirements: Strong hands-on experience with SIEM engineering, including developing and tuning detection rules, with Microsoft Sentinel preferred Experience writing detection logic using KQL or similar query languages Proven experience designing and implementing SOAR automations and playbooks such as Logic Apps … attack lifecycle Experience with XDR or EDR platforms such as Microsoft Defender, CrowdStrike or Cortex Understanding of cloud environments, particularly Azure, and associated security telemetry Experience working in customer-facing or consultancy roles Strong communication skills, with the ability to explain technical concepts clearly Technical Competencies: SIEM ...

perfect opportunity for you.Required Skills and ExperienceStrong hands-on experience with SIEM engineering, including developing and tuning detection rules, with Microsoft Sentinel preferred Experience writing detection logic using KQL or similar query languages Proven experience designing and implementing SOAR automations and playbooks such as Logic Apps, Cortex XSOAR … sources map to the attack lifecycleExperience with XDR or EDR platforms such as Microsoft Defender, CrowdStrike or Cortex Understanding of cloud environments, particularly Azure, and associated security telemetry Experience working in customer-facing or consultancy roles Strong communication skills, with the ability to explain technical concepts clearlyTechnical CompetenciesSIEM ...

within a SOC environment with experience mentoring more junior staff. You will have the following experience: Industry standard Security qualifications (SANS GCIH, CISSP, Azure, Splunk, etc) or equivalent. Strong experience with SIEM technologies within a SOC (Splunk and MS Sentinel experience is highly desirable) Hands ...

looking for:Previously worked as a Threat Detection Engineer or in a similar role.Must have strong expertise in KQL.Hands-on experience with Microsoft Sentinel and Defender (Endpoint, Office 365).Familiarity with Microsoft Entra ID, including Identity Governance.Experience with Microsoft Purview, particularly DLP and data protection tools.Exposure to cloud … native logging in Azure and Kubernetes environments.Understanding of “detection as code” or “everything as code” approaches, including CI/CD pipelines.Experience working with or alongside MSP SOC teams.Awareness of Agile methodologies and ways of working.Knowledge of attacker TTPs, threat modelling, and cyber security frameworks.Understanding of statistics, data science ...

/IP networking, common log sources, and basic attack techniques. You will be comfortable working with a SIEM platform such as Splunk, Microsoft Sentinel, or an equivalent tool, and have basic knowledge of common operating systems including Windows, Linux, and macOS. You will demonstrate strong analytical and problem … cyber security or IT operationsEntry‐level or foundation cyber security certifications desirable (CySA+, SC‐200)Experience with cloud platforms such as Microsoft Azure and/or AWS is desirableProficiency with Microsoft Office tools, particularly Excel and Word Security & Working Requirements Eligibility for, or holding, UK SC ClearanceWillingness ...

development using modern DevOps practices to enhance security operations.Understanding of social engineering tactics, phishing attacks, and physical security measures.Experience with secured cloud architectures (Azure, AWS) and tools such as Microsoft Defender for Endpoint and Microsoft Sentinel.Attainment of relevant Microsoft accreditations (e.g. … empower individuals to create sustainable value through innovative technology solutions. As one of Microsoft's leading partners in the UK specializing in Azure, Security, Dynamics 365, and Microsoft 365, we have a proven track record of delivering transformational IT services.Our Selection Process:We are committed to providing ...

intelligence assessments, and comfort peer‐reviewing others’ analytic tradecraft. Working knowledge of cloud security event investigation and cloud detection tuning, particularly across AWS, Azure or GCP environments, including understanding of infrastructure‐level telemetry. Experience framing security findings in risk terms for non‐technical stakeholders—communicating likelihood, impact … expertise to proposals or bids. Tools and practice familiarity Hands‐on experience with at least one major SIEM platform (for example, Splunk, Microsoft Sentinel or Elastic Security) including writing and tuning detection rules. Familiarity with threat intelligence platforms, OSINT tooling or indicator lifecycle management in an operational context. ...